| Server IP : 209.205.66.10 / Your IP : 216.73.216.173 Web Server : Apache/2.4.52 (Ubuntu) System : Linux ammon 5.15.0-186-generic #196-Ubuntu SMP Sat Jun 20 16:09:34 UTC 2026 x86_64 User : ( 1006) PHP Version : 8.5.8 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /lib/python3/dist-packages/macaroonbakery/checkers/__pycache__/ |
Upload File : |
o
�6�\ �
@ s* d dl Z d dlmZ d dlmZ d dlZddlmZ ddlmZm Z m
Z
m Z m Z m
Z
ddlmZ ddlmZ dd lmZ dd
lmZ dd lmZ G d d
� d
e�ZG dd� de�ZG dd� de�Z G dd� dedd��Z dd� Z dd� Z dd� Z d d � Z!d d � Z"d d!� Z#d"d#� Z$e e e e e e ee!e
e"iZ%dS )$� N)�
namedtuple)�datetime� )� parse_caveat)�
COND_ALLOW�
COND_DECLARED� COND_DENY�
COND_ERROR�COND_TIME_BEFORE�
STD_NAMESPACE)� DECLARED_KEY)� Namespace)�OP_KEY)�TIME_KEY)�condition_with_prefixc @ s e Zd ZdZdS )�
RegisterErrorz<Raised when a condition cannot be registered with a Checker.N)�__name__�
__module__� __qualname__�__doc__� r r �C/usr/lib/python3/dist-packages/macaroonbakery/checkers/_checkers.pyr s r c @ s, e Zd ZdZejZejdd� �Zdd� Z dS )�FirstPartyCaveatCheckerz�Used to check first party caveats for validity with respect to
information in the provided context.
If the caveat kind was not recognised, the checker should return
ErrCaveatNotRecognized.
c C � t d��)z� Checks that the given caveat condition is valid with respect to
the given context information.
:param ctx: an Auth context
:param caveat a string
z;check_first_party_caveat method must be defined in subclass��NotImplementedError)�self�ctx�caveatr r r �check_first_party_caveat& s z0FirstPartyCaveatChecker.check_first_party_caveatc C r )zC Returns the namespace associated with the caveat checker.
z,namespace method must be defined in subclassr �r r r r � namespace0 s z!FirstPartyCaveatChecker.namespaceN)
r r r r �abc�ABCMeta�
__metaclass__�abstractmethodr r! r r r r r s
r c @ sB e Zd ZdZddd�Zdd� Zdd � Zd
d � Zd d
� Zdd� Z dS )�Checkerz6 Holds a set of checkers for first party caveats.
NTc C s. |d u rt � }|| _i | _|r| �� d S d S �N)r
�
_namespace� _checkers� register_std)r r! �include_std_checkersr r r �__init__; s �zChecker.__init__c
C s� zt |�\}}W n ty# } zd�||jd �W Y d}~S d}~ww | j�|�}|du r3d�|�S |�|||�}|durDd�||�S dS )zz Checks the caveat against all registered caveat conditions.
:return: error message string if any or None
z cannot parse caveat "{}": {}r Nz0caveat "{}" not satisfied: caveat not recognizedz caveat "{}" not satisfied: {})r �
ValueError�format�argsr) �get�check)r r �cav�cond�arg�ex�checker�errr r r r C s �� � �z Checker.check_first_party_caveatc C s | j S )z< Returns the namespace associated with the Checker.
)r( r r r r r! U s zChecker.namespacec C s t | j�� dd� d�S )z� Returns information on all the registered checkers.
Sorted by namespace and then name
:returns a list of CheckerInfo
c S s | j | jfS r' )�ns�name)�xr r r �<lambda>` s z Checker.info.<locals>.<lambda>)�key)�sortedr) �valuesr r r r �infoZ s z Checker.infoc C s� |du r t d�||���| j�|�}|du r t d�||���|dkr1|�d�dkr1t d�||���t||�}| j�|�}|durJt d�|||j���t ||||d �| j|< dS )
aF Registers the given condition(string) in the given namespace
uri (string) to be checked with the given check function.
The check function checks a caveat by passing an auth context, a cond
parameter(string) that holds the caveat condition including any
namespace prefix and an arg parameter(string) that hold any additional
caveat argument text. It will return any error as string otherwise
None.
It will raise a ValueError if the namespace is not registered or
if the condition has already been registered.
NzKno check function registered for namespace {} when registering condition {}zCno prefix registered for namespace {} when registering condition {}� �:r zLcaveat condition {} in namespace {} contains a colon but its prefix is emptyz@checker for {} (namespace {}) already registered in namespace {})r1 r8 r9 �prefix)
r r. r( �resolve�findr r) r0 r8 � CheckerInfo)r r3 �urir1 rB � full_condr? r r r �registerb s8 � ��
��zChecker.registerc C s. | j �td� tD ] }| �|tt| � q dS )z� Registers all the standard checkers in the given checker.
If not present already, the standard checkers schema (STD_NAMESPACE) is
added to the checker's namespace with an empty prefix.
r@ N)r( rH r �
_ALL_CHECKERS)r r3 r r r r* � s �zChecker.register_std�NT)
r r r r r, r r! r? rH r* r r r r r& 7 s
'r& c s& e Zd ZdZdZd� fdd� Z� ZS )rE z;CheckerInfo holds information on a registered checker.
r Nc s t t| ��| ||||�S )a}
:param check holds the actual checker function which takes an auth
context and a condition and arg string as arguments.
:param prefix holds the prefix for the checker condition as string.
:param name holds the name of the checker condition as string.
:param ns holds the namespace URI for the checker's schema as
Namespace.
)�superrE �__new__)�clsrB r9 r8 r1 �� __class__r r rL � s zCheckerInfo.__new__r' )r r r r � __slots__rL �
__classcell__r r rN r rE � s rE � CheckInfozprefix name ns checkc C sl | � t�}|d u rt�� }n|�� }ztj|dd�jd d�}||kr%W dS W d S ty5 d�|� Y S w )NT)�utc)�tzinfozmacaroon has expiredz cannot parse "{}" as RFC 3339) r0 r r �utcnow� pyrfc3339�parse�replacer- r. )r r3 r4 �clock�now�expiryr r r �_check_time_before� s
� ��r\ c C sx |� dd�}t|�dkrdS | �ti �}|�|d �}|d u r)d�|d |d �S ||d kr:d�|d ||d �S d S )N� r � z declared caveat has no valuer zgot {}=null, expected "{}"zgot {}="{}", expected "{}")�split�lenr0 r r. )r r3 r4 �parts�attrs�valr r r �_check_declared� s rd c C s dS )Nz
bad caveatr �r r3 r4 r r r � _check_error� s rf c C � t | d|�S rJ ��_check_operationsre r r r � _check_allow� � rj c C rg )NFrh re r r r � _check_deny� rk rl c C sx | � tg �}t|�dkr#|r!|�� }t|�dkrdS d�|d �S dS |�� }|D ]}t|||�}|dur9| S q)dS )z� Checks an allow or a deny caveat. The need_ops parameter specifies
whether we require all the operations in the caveat to be declared in
the context.
r zno operations allowed�{} not allowedN)r0 r r` r_ r. � _check_op)r �need_opsr4 �ctx_ops�f�fields�opr7 r r r ri � s �ri c C s4 d}|D ]
}|| krd} nq||krd� | �S d S )NFTrm )r. )�ctx_op�need_oprr �foundrs r r r rn � s �
rn )&r" � collectionsr r rV �_caveatr � _conditionsr r r r r
r � _declaredr r( r
�
_operationr �_timer �_utilsr � Exceptionr �objectr r& rE r\ rd rf rj rl ri rn rI r r r r �<module> s8 ] �